103 lines
3.8 KiB
TypeScript
103 lines
3.8 KiB
TypeScript
import { expect, test } from '@playwright/test';
|
|
|
|
import { policyAuthorSession } from '../../src/app/testing';
|
|
|
|
const mockConfig = {
|
|
authority: {
|
|
issuer: 'https://authority.local',
|
|
clientId: 'stellaops-ui',
|
|
authorizeEndpoint: 'https://authority.local/connect/authorize',
|
|
tokenEndpoint: 'https://authority.local/connect/token',
|
|
logoutEndpoint: 'https://authority.local/connect/logout',
|
|
redirectUri: 'http://127.0.0.1:4400/auth/callback',
|
|
postLogoutRedirectUri: 'http://127.0.0.1:4400/',
|
|
scope:
|
|
'openid profile email ui.read authority:tenants.read advisory:read vex:read exceptions:read exceptions:approve aoc:verify findings:read orch:read vuln:view vuln:investigate vuln:operate vuln:audit',
|
|
audience: 'https://scanner.local',
|
|
dpopAlgorithms: ['ES256'],
|
|
refreshLeewaySeconds: 60,
|
|
},
|
|
apiBaseUrls: {
|
|
authority: 'https://authority.local',
|
|
scanner: 'https://scanner.local',
|
|
policy: 'https://scanner.local',
|
|
concelier: 'https://concelier.local',
|
|
attestor: 'https://attestor.local',
|
|
},
|
|
quickstartMode: true,
|
|
};
|
|
|
|
test.beforeEach(async ({ page }) => {
|
|
await page.addInitScript((session) => {
|
|
try {
|
|
window.sessionStorage.clear();
|
|
} catch {
|
|
// ignore storage errors in restricted contexts
|
|
}
|
|
(window as any).__stellaopsTestSession = session;
|
|
}, policyAuthorSession);
|
|
|
|
await page.route('**/config.json', (route) =>
|
|
route.fulfill({
|
|
status: 200,
|
|
contentType: 'application/json',
|
|
body: JSON.stringify(mockConfig),
|
|
})
|
|
);
|
|
|
|
await page.route('https://authority.local/**', (route) => route.abort());
|
|
});
|
|
|
|
test('triage workflow: pills navigate + open drawer', async ({ page }) => {
|
|
await page.goto('/triage/artifacts/asset-web-prod');
|
|
await expect(page.getByRole('heading', { name: 'Artifact triage' })).toBeVisible({ timeout: 10000 });
|
|
|
|
await expect(page.getByRole('tab', { name: 'Evidence' })).toHaveAttribute('aria-selected', 'true');
|
|
|
|
const reachabilityPill = page.getByRole('button', { name: /^Reachability:/ });
|
|
const vexPill = page.getByRole('button', { name: /^VEX:/ });
|
|
await expect(reachabilityPill).toBeVisible();
|
|
await expect(vexPill).toBeVisible();
|
|
|
|
await reachabilityPill.click();
|
|
await expect(page.getByRole('tab', { name: 'Reachability' })).toHaveAttribute('aria-selected', 'true');
|
|
await expect(page.locator('#triage-panel-reachability')).toBeVisible();
|
|
|
|
await vexPill.click();
|
|
const drawer = page.getByRole('dialog', { name: 'Record Decision' });
|
|
await expect(drawer).toHaveClass(/open/);
|
|
|
|
await drawer.getByRole('button', { name: 'Close drawer' }).click();
|
|
await expect(drawer).not.toHaveClass(/open/);
|
|
});
|
|
|
|
test('triage workflow: record decision opens VEX modal', async ({ page }) => {
|
|
await page.goto('/triage/artifacts/asset-web-prod');
|
|
await expect(page.getByRole('heading', { name: 'Artifact triage' })).toBeVisible({ timeout: 10000 });
|
|
|
|
await page.getByRole('tab', { name: 'Evidence' }).click();
|
|
await expect(page.locator('#triage-panel-evidence')).toBeVisible();
|
|
|
|
await page.getByRole('button', { name: 'Record Decision' }).first().click();
|
|
|
|
const drawer = page.getByRole('dialog', { name: 'Record Decision' });
|
|
await expect(drawer).toHaveClass(/open/);
|
|
|
|
const submit = drawer.getByRole('button', { name: 'Record Decision' });
|
|
await expect(submit).toBeDisabled();
|
|
|
|
await drawer.getByLabel('Select reason').selectOption('component_not_present');
|
|
await drawer.getByLabel('Additional notes').fill('E2E: not affected via quickstart fixture');
|
|
|
|
await expect(submit).toBeEnabled();
|
|
await submit.click();
|
|
|
|
await expect(drawer).not.toHaveClass(/open/);
|
|
|
|
const vexDialog = page.getByRole('dialog', { name: 'VEX decision' });
|
|
await expect(vexDialog).toBeVisible({ timeout: 10000 });
|
|
|
|
await page.getByRole('button', { name: 'Close VEX decision dialog' }).click();
|
|
await expect(vexDialog).toBeHidden();
|
|
});
|